11 replies to this topic

[IvanChang]

I've been trying to create a patch for my software running in Windows XP for Least Priviliged Users but until now I have not been successful.

The reason I'm creating such a patch is because my software will be deployed into 100s to 1000s of PCs. Most of which are used by Least-Privileged Users. Power Users are non-existent and there are very few Administrators. And unfortunately, I cannot influence them to change their account policies.

I've been searching all over the net for solutions but there are none that could work for me.

One of the methods which I have used was a set of procedures recommended by InstallShield:
http://helpnet.insta...dminPatches.htm
http://helpnet.insta...nAdminPatch.htm

I used quickpatch with those steps but I keep getting the message "You do not have sufficient privileges to complete this installation for all users of the machine. Log on as administrator and then try this installation"

I also tried it with the regular patch by using the Patch Design but it came back with similar problem. "The system administrator has set policies to prevent this installation"

I'd really appreciate it if anyone can point me in the right direction.


PS: Mr Stefan Krueger, if you're reading this, I apologize for sending you a similar private email regarding this matter. I'm new to this forum and I only found out about this thread after sending it. Sorry about that.

[Stefan Krueger]

So you added a digital signature to the original install, and you signed the patch with that signature? And you are installing this from a CD, not from hard disk or network, and also not using a self-extracting package (one setup.exe file that contains everything)? And the original install was for all users (per-machine, ALLUSRES=1)?

[IvanChang]

Yes, I've used Signcode on both the original install .msi and the patch .msp file. The original install was from a CD, while the patch was administered through a thumbdrive. And all of them are setup in uncompressed form.

When I installed the original package, I selected the option "Install for All Users" in the Setup dialog box. I also verified that all users have the link in the Start Program menu.
Does that consider as ALLUSERS=1? I'm not sure how I can verify a per-machine install though.

I will post a verbose log of my msiexec so that you can have a better look at it.

[IvanChang]

The verbose Install Log is really long, so I'm just posting the first segment that should be of most interest. The Patch Log is listed in full.
The full logs are also included as zipped attachments.

Installation Log:
=== Verbose logging started: 12/20/2005 11:48:49 Build type: SHIP UNICODE 3.00.3790.2180 Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI © (F4:F0) [11:48:49:437]: Resetting cached policy values
MSI © (F4:F0) [11:48:49:437]: Machine policy value 'Debug' is 0
MSI © (F4:F0) [11:48:49:437]: ******* RunEngine:
******* Product: PEMBookWriter.msi
******* Action:
******* CommandLine: **********
MSI © (F4:F0) [11:48:49:437]: Machine policy value 'DisableUserInstalls' is 0
MSI © (F4:F0) [11:48:49:453]: SOFTWARE RESTRICTION POLICY: Verifying package --> 'E:\PEMBookWriter.msi' against software restriction policy
MSI © (F4:F0) [11:48:49:453]: SOFTWARE RESTRICTION POLICY: E:\PEMBookWriter.msi has a digital signature
MSI © (F4:F0) [11:48:49:515]: SOFTWARE RESTRICTION POLICY: E:\PEMBookWriter.msi is permitted to run at the 'unrestricted' authorization level.
MSI © (F4:F0) [11:48:49:531]: Cloaking enabled.
MSI © (F4:F0) [11:48:49:531]: Attempting to enable all disabled priveleges before calling Install on Server
MSI © (F4:F0) [11:48:49:546]: End dialog not enabled
MSI © (F4:F0) [11:48:49:546]: Original package ==> E:\PEMBookWriter.msi
MSI © (F4:F0) [11:48:49:546]: Package we're running from ==> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\d6dfd.msi
MSI © (F4:F0) [11:48:49:546]: APPCOMPAT: looking for appcompat database entry with ProductCode '{59E7EB04-1297-4135-A6AB-ABF98B14C419}'.
MSI © (F4:F0) [11:48:49:546]: APPCOMPAT: no matching ProductCode found in database.
MSI © (F4:F0) [11:48:49:546]: MSCOREE not loaded loading copy from system32
MSI © (F4:F0) [11:48:49:562]: Machine policy value 'TransformsSecure' is 0
MSI © (F4:F0) [11:48:49:562]: User policy value 'TransformsAtSource' is 0
MSI © (F4:F0) [11:48:49:562]: Machine policy value 'DisablePatch' is 0
MSI © (F4:F0) [11:48:49:562]: Machine policy value 'AllowLockdownPatch' is 0
MSI © (F4:F0) [11:48:49:562]: Machine policy value 'DisableLUAPatching' is 0
MSI © (F4:F0) [11:48:49:562]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI © (F4:F0) [11:48:49:562]: APPCOMPAT: looking for appcompat database entry with ProductCode '{59E7EB04-1297-4135-A6AB-ABF98B14C419}'.
MSI © (F4:F0) [11:48:49:562]: APPCOMPAT: no matching ProductCode found in database.
MSI © (F4:F0) [11:48:49:562]: Transforms are not secure.
MSI © (F4:F0) [11:48:49:562]: Command Line: CURRENTDIRECTORY=E:\ CLIENTUILEVEL=0 CLIENTPROCESSID=2036 CURRENTMEDIAVOLUMELABEL=PEMBOOK
MSI © (F4:F0) [11:48:49:562]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{4F67D0D4-FF3C-4A17-BA0E-98397E00CE75}'.
MSI © (F4:F0) [11:48:49:562]: Product Code passed to Engine.Initialize: ''
MSI © (F4:F0) [11:48:49:562]: Product Code from property table before transforms: '{59E7EB04-1297-4135-A6AB-ABF98B14C419}'
MSI © (F4:F0) [11:48:49:562]: Product Code from property table after transforms: '{59E7EB04-1297-4135-A6AB-ABF98B14C419}'
MSI © (F4:F0) [11:48:49:562]: Product not registered: beginning first-time install
MSI © (F4:F0) [11:48:49:562]: PROPERTY CHANGE: Adding ProductState property. Its value is '-1'.
MSI © (F4:F0) [11:48:49:562]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI © (F4:F0) [11:48:49:562]: User policy value 'DisableMedia' is 0
MSI © (F4:F0) [11:48:49:562]: User policy value 'SearchOrder' is 'nmu'
MSI © (F4:F0) [11:48:49:562]: Adding new sources is allowed.
MSI © (F4:F0) [11:48:49:562]: PROPERTY CHANGE: Adding PackagecodeChanging property. Its value is '1'.
MSI © (F4:F0) [11:48:49:562]: Package name extracted from package path: 'PEMBookWriter.msi'
MSI © (F4:F0) [11:48:49:562]: Package to be registered: 'PEMBookWriter.msi'
MSI © (F4:F0) [11:48:49:562]: Note: 1: 2729
MSI © (F4:F0) [11:48:49:562]: Note: 1: 2729
MSI © (F4:F0) [11:48:49:562]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI © (F4:F0) [11:48:49:562]: Machine policy value 'DisableMsi' is 0
MSI © (F4:F0) [11:48:49:562]: Machine policy value 'AlwaysInstallElevated' is 0
MSI © (F4:F0) [11:48:49:562]: User policy value 'AlwaysInstallElevated' is 0
MSI © (F4:F0) [11:48:49:562]: Running product '{59E7EB04-1297-4135-A6AB-ABF98B14C419}' with user privileges: It's not assigned.
MSI © (F4:F0) [11:48:49:562]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'E:\'.
MSI © (F4:F0) [11:48:49:562]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '0'.
MSI © (F4:F0) [11:48:49:562]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '2036'.
MSI © (F4:F0) [11:48:49:562]: PROPERTY CHANGE: Adding CURRENTMEDIAVOLUMELABEL property. Its value is 'PEMBOOK'.
MSI © (F4:F0) [11:48:49:562]: TRANSFORMS property is now:
MSI © (F4:F0) [11:48:49:562]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Application Data
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Favorites
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\NetHood
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\My Documents
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\PrintHood
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Recent
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\SendTo
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Templates
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Application Data
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Local Settings\Application Data
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\My Documents\My Pictures
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu\Programs\Administrative Tools
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu\Programs
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Start Menu
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\Administrator\Desktop
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu\Programs
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Start Menu
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\Documents and Settings\All Users\Desktop
MSI © (F4:F0) [11:48:49:562]: SHELL32::SHGetFolderPath returned: C:\WINDOWS\Fonts
MSI © (F4:F0) [11:48:49:562]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI © (F4:F0) [11:48:49:578]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'Student Project Lab'.
MSI © (F4:F0) [11:48:49:578]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding COMPANYNAME property. Its value is 'National University of Singapore'.
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\d6dfd.msi'.
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'E:\PEMBookWriter.msi'.
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding SourceDir property. Its value is 'E:\'.
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding SOURCEDIR property. Its value is 'E:\'.
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding MediaSourceDir property. Its value is '1'.
MSI © (F4:78) [11:48:49:578]: PROPERTY CHANGE: Adding VersionHandler property. Its value is '3.00'.
=== Logging started: 12/20/2005 11:48:49 ===
MSI © (F4:F0) [11:48:49:578]: Note: 1: 2262 2: PatchPackage 3: -2147287038
MSI © (F4:F0) [11:48:49:578]: Machine policy value 'DisableRollback' is 0
MSI © (F4:F0) [11:48:49:578]: User policy value 'DisableRollback' is 0
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding UILevel property. Its value is '5'.
MSI © (F4:F0) [11:48:49:578]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI © (F4:F0) [11:48:49:578]: Doing action: INSTALL
Action start 11:48:49: INSTALL.
MSI © (F4:F0) [11:48:49:593]: UI Sequence table 'InstallUISequence' is present and populated.
MSI © (F4:F0) [11:48:49:593]: Running UISequence
MSI © (F4:F0) [11:48:49:593]: PROPERTY CHANGE: Adding EXECUTEACTION property. Its value is 'INSTALL'.
MSI © (F4:F0) [11:48:49:593]: Doing action: AppSearch
Action start 11:48:49: AppSearch.
MSI © (F4:F0) [11:48:49:593]: Note: 1: 2262 2: CompLocator 3: -2147287038
MSI © (F4:F0) [11:48:49:593]: Note: 1: 2262 2: RegLocator 3: -2147287038
MSI © (F4:F0) [11:48:49:593]: Note: 1: 2262 2: IniLocator 3: -2147287038
MSI © (F4:F0) [11:48:49:593]: PROPERTY CHANGE: Adding IE4FOUND property. Its value is 'C:\WINDOWS\system32\shdocvw.dll'.
MSI © (F4:F0) [11:48:49:593]: Note: 1: 2262 2: CompLocator 3: -2147287038
MSI © (F4:F0) [11:48:49:593]: Note: 1: 2262 2: RegLocator 3: -2147287038
MSI © (F4:F0) [11:48:49:593]: Note: 1: 2262 2: IniLocator 3: -2147287038
MSI © (F4:F0) [11:48:49:593]: PROPERTY CHANGE: Adding XPFOUND property. Its value is 'C:\WINDOWS\system32\KERNEL32.DLL'.
Action ended 11:48:49: AppSearch. Return value 1.
MSI © (F4:F0) [11:48:49:593]: Doing action: LaunchConditions
Action start 11:48:49: LaunchConditions.
Action ended 11:48:49: LaunchConditions. Return value 1.
MSI © (F4:F0) [11:48:49:593]: Doing action: SetupInitialization
Action start 11:48:49: SetupInitialization.
Info 2898.Tahoma8, Tahoma, 0
Info 2898.TahomaBold10, Tahoma, 0
Action ended 11:48:49: SetupInitialization. Return value 1.
MSI © (F4:F0) [11:48:49:640]: Doing action: FindRelatedProducts
Action start 11:48:49: FindRelatedProducts.
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: Upgrade 3: -2147287038
Action ended 11:48:49: FindRelatedProducts. Return value 1.
MSI © (F4:F0) [11:48:49:640]: Skipping action: CCPSearch (condition is false)
MSI © (F4:F0) [11:48:49:640]: Skipping action: RMCCPSearch (condition is false)
MSI © (F4:F0) [11:48:49:640]: Doing action: ValidateProductID
Action start 11:48:49: ValidateProductID.
Action ended 11:48:49: ValidateProductID. Return value 1.
MSI © (F4:F0) [11:48:49:640]: Doing action: CostInitialize
Action start 11:48:49: CostInitialize.
MSI © (F4:F0) [11:48:49:640]: Machine policy value 'MaxPatchCacheSize' is 10
MSI © (F4:F0) [11:48:49:640]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'D:\'.
MSI © (F4:F0) [11:48:49:640]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
Action ended 11:48:49: CostInitialize. Return value 1.
MSI © (F4:F0) [11:48:49:640]: Doing action: FileCost
Action start 11:48:49: FileCost.
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: MsiAssembly 3: -2147287038
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: Extension 3: -2147287038
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: IniFile 3: -2147287038
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: MoveFile 3: -2147287038
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: DuplicateFile 3: -2147287038
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: ReserveCost 3: -2147287038
Action ended 11:48:49: FileCost. Return value 1.
MSI © (F4:F0) [11:48:49:640]: Doing action: IsolateComponents
Action start 11:48:49: IsolateComponents.
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: BindImage 3: -2147287038
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: IsolatedComponent 3: -2147287038
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2262 2: Patch 3: -2147287038
MSI © (F4:F0) [11:48:49:640]: Note: 1: 2728 2: Patch
Action ended 11:48:49: IsolateComponents. Return value 1.
MSI © (F4:F0) [11:48:49:640]: Doing action: setUserProfileNT
Action start 11:48:49: setUserProfileNT.
MSI © (F4:F0) [11:48:49:640]: PROPERTY CHANGE: Adding USERPROFILE property. Its value is 'C:\Documents and Settings\Administrator'.
Action ended 11:48:49: setUserProfileNT. Return value 1.
MSI © (F4:F0) [11:48:49:640]: Skipping action: SetAllUsersProfileNT (condition is false)
MSI © (F4:F0) [11:48:49:640]: Doing action: setAllUsersProfile2K
Action start 11:48:49: setAllUsersProfile2K.
MSI © (F4:F0) [11:48:49:640]: PROPERTY CHANGE: Adding ALLUSERSPROFILE property. Its value is 'C:\Documents and Settings\All Users'.
Action ended 11:48:49: setAllUsersProfile2K. Return value 1.
MSI © (F4:F0) [11:48:49:640]: Doing action: ResolveSource
Action start 11:48:49: ResolveSource.
MSI © (F4:F0) [11:48:49:656]: Resolving source.
MSI © (F4:F0) [11:48:49:656]: Resolving source to launched-from source.
MSI © (F4:F0) [11:48:49:656]: Setting launched-from source as last-used.
MSI © (F4:F0) [11:48:49:656]: PROPERTY CHANGE: Adding SourcedirProduct property. Its value is '{59E7EB04-1297-4135-A6AB-ABF98B14C419}'.
MSI © (F4:F0) [11:48:49:656]: SOURCEDIR ==> E:\
MSI © (F4:F0) [11:48:49:656]: SOURCEDIR product ==> {59E7EB04-1297-4135-A6AB-ABF98B14C419}
MSI © (F4:F0) [11:48:49:656]: Determining source type
MSI © (F4:F0) [11:48:49:656]: Source type from package 'PEMBookWriter.msi': 0
MSI © (F4:F0) [11:48:49:656]: Source path resolution complete. Dumping Directory table...
MSI © (F4:F0) [11:48:49:656]: Dir (source): Key: TARGETDIR , Object: E:\ , LongSubPath: , ShortSubPath:
MSI © (F4:F0) [11:48:49:656]: Dir (source): Key: INSTALLDIR.C3A146F5_4B48_11D5_A819_00B0D0428C0C , Object: E:\ , LongSubPath: , ShortSubPath:

.. and so on

Attached Files

•  OriginalInstallLog.zip   34.47KB   131 downloads

[IvanChang]

PatchLog:
=== Verbose logging started: 12/20/2005 11:52:56 Build type: SHIP UNICODE 3.00.3790.2180 Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI © (A4:5C) [11:52:56:609]: Resetting cached policy values
MSI © (A4:5C) [11:52:56:609]: Machine policy value 'Debug' is 0
MSI © (A4:5C) [11:52:56:609]: ******* RunEngine:
******* Product: {59E7EB04-1297-4135-A6AB-ABF98B14C419}
******* Action:
******* CommandLine: **********
MSI © (A4:5C) [11:52:56:625]: Machine policy value 'DisableUserInstalls' is 0
MSI © (A4:5C) [11:52:56:687]: Cloaking enabled.
MSI © (A4:5C) [11:52:56:687]: Attempting to enable all disabled priveleges before calling Install on Server
MSI © (A4:5C) [11:52:56:703]: End dialog not enabled
MSI © (A4:5C) [11:52:56:703]: Original package ==> C:\WINDOWS\Installer\b98db.msi
MSI © (A4:5C) [11:52:56:703]: Package we're running from ==> C:\WINDOWS\Installer\b98db.msi
MSI © (A4:5C) [11:52:56:718]: APPCOMPAT: looking for appcompat database entry with ProductCode '{59E7EB04-1297-4135-A6AB-ABF98B14C419}'.
MSI © (A4:5C) [11:52:56:718]: APPCOMPAT: no matching ProductCode found in database.
MSI © (A4:5C) [11:52:56:718]: MSCOREE not loaded loading copy from system32
MSI © (A4:5C) [11:52:56:718]: Original patch ==> C:\Documents and Settings\LimitedUser\Desktop\LatestPatch2\Writer130.msp
MSI © (A4:5C) [11:52:56:718]: Patch we're running from ==> C:\DOCUME~1\LIMITE~1\LOCALS~1\Temp\1133ee.msp
MSI © (A4:5C) [11:52:56:734]: SOFTWARE RESTRICTION POLICY: Verifying patch --> 'C:\Documents and Settings\LimitedUser\Desktop\LatestPatch2\Writer130.msp' against software restriction policy
MSI © (A4:5C) [11:52:56:734]: SOFTWARE RESTRICTION POLICY: C:\Documents and Settings\LimitedUser\Desktop\LatestPatch2\Writer130.msp has a digital signature
MSI © (A4:5C) [11:52:56:812]: SOFTWARE RESTRICTION POLICY: C:\Documents and Settings\LimitedUser\Desktop\LatestPatch2\Writer130.msp is permitted to run at the 'unrestricted' authorization level.
MSI © (A4:5C) [11:52:56:828]: SequencePatches starts. Product code: {59E7EB04-1297-4135-A6AB-ABF98B14C419}, Product version: 1.00.0000, Upgrade code: {FDF7672A-D427-4ADD-B337-1FD2D6FB8743}, Product language 1033
MSI © (A4:5C) [11:52:56:843]: 3.0 patch C:\Documents and Settings\LimitedUser\Desktop\LatestPatch2\Writer130.msp is of type QFE
MSI © (A4:5C) [11:52:56:843]: PATCH SEQUENCER: verifying the applicability of QFE patch C:\Documents and Settings\LimitedUser\Desktop\LatestPatch2\Writer130.msp against product code: {59E7EB04-1297-4135-A6AB-ABF98B14C419}, product version: 1.00.0000, product language 1033 and upgrade code: {FDF7672A-D427-4ADD-B337-1FD2D6FB8743}
MSI © (A4:5C) [11:52:56:843]: Validating transform 'AppToFirstUpgrade' with validation bits 0x922
MSI © (A4:5C) [11:52:56:843]: Transform 'AppToFirstUpgrade' is valid.
MSI © (A4:5C) [11:52:56:843]: PATCH SEQUENCER: QFE patch C:\Documents and Settings\LimitedUser\Desktop\LatestPatch2\Writer130.msp is applicable.
MSI © (A4:5C) [11:52:56:843]: SequencePatches returns success.
MSI © (A4:5C) [11:52:56:843]: Final Patch Application Order:
MSI © (A4:5C) [11:52:56:843]: {92EBC5F3-31D4-4595-8EDD-E44F60B0E55D} - C:\Documents and Settings\LimitedUser\Desktop\LatestPatch2\Writer130.msp
MSI © (A4:5C) [11:52:56:843]: Machine policy value 'DisablePatch' is 0
MSI © (A4:5C) [11:52:56:843]: Machine policy value 'AllowLockdownPatch' is 0
MSI © (A4:5C) [11:52:56:843]: Machine policy value 'DisableMsi' is 0
MSI © (A4:5C) [11:52:56:843]: Machine policy value 'AlwaysInstallElevated' is 0
MSI © (A4:5C) [11:52:56:843]: User policy value 'AlwaysInstallElevated' is 0
MSI © (A4:5C) [11:52:56:843]: Product {59E7EB04-1297-4135-A6AB-ABF98B14C419} is admin assigned: LocalSystem owns the publish key.
MSI © (A4:5C) [11:52:56:843]: Product {59E7EB04-1297-4135-A6AB-ABF98B14C419} is managed.
MSI © (A4:5C) [11:52:56:843]: Running product '{59E7EB04-1297-4135-A6AB-ABF98B14C419}' with elevated privileges: Product is assigned.
MSI © (A4:5C) [11:52:56:843]: Machine policy value 'DisableLUAPatching' is 0
This installation is forbidden by system policy. Contact your system administrator.
C:\WINDOWS\Installer\b98db.msi
MSI © (A4:5C) [11:52:56:843]: Product: PEMBookWriter - Update '{92EBC5F3-31D4-4595-8EDD-E44F60B0E55D}' could not be installed. Error code 1625. Additional information is available in the log file C:\Documents and Settings\LimitedUser\Desktop\UpdatePatch.log.

MSI © (A4:5C) [11:52:56:859]: Note: 1: 1708
MSI © (A4:5C) [11:52:56:859]: Note: 1: 2729
MSI © (A4:5C) [11:52:56:859]: Note: 1: 2729
MSI © (A4:5C) [11:52:56:859]: Product: PEMBookWriter -- Installation failed.

MSI © (A4:5C) [11:52:56:859]: Attempting to delete file C:\DOCUME~1\LIMITE~1\LOCALS~1\Temp\1133ee.msp
MSI © (A4:5C) [11:52:56:859]: MainEngineThread is returning 1625
=== Verbose logging stopped: 12/20/2005 11:52:56 ===

Attached Files

•  Patch.log   9.74KB   75 downloads

[Stefan Krueger]

[IvanChang]

Krueger, thanks for the reply.

I think that might just be the cause. Could you please explain how to insert the MsiPatchCertificate Table?

I have read the link earlier, but it did not provide any guidance to include the table.

[Stefan Krueger]

That depends on the tool you are using. Check its documentation for information how to add a table.

[IvanChang]

I use Visual Studio. I've searched thru the msdn but was unable to find out how to add a table. I'd really appreciate it if you can point me to some resources about it.

[IvanChang]

Btw, I'm trying out Installshield at the same time to see if I can create the same update patch. So far, there's no success there as well.

I don't mind using either Visual Studio or Installshield as long as I can get it to work.

[mandy]

I don't use either of those, but I can tell you that Orca wil do the trick easily.

You should also try a CD or DVD as Stefan suggested, in case your current media isn't condidered "removable".

Btw, you may not be interested in this but I thought I'd mention the "AllowLockDownPatch" policy anyway.

[Stefan Krueger]

Visual Studio has very limited MSI capabilities, and it doesn't let you add tables. You could use Orca to post-process your msi files.
InstallShield (Professional and Premier editions) have a Direct Editor that gives you full access to all tables.